Okay, it's ugly, but:

Write a policy on the SRX that is attached to a scheduler.  

Make the "then" action of the policy permit application-services idp.

Write an IDP policy that has a "then" action to re-write DSCP markings for this 
traffic.

Write a CoS policy on your EXs to police traffic matching that DSCP value - 
I've never been able to re-write AND police on those values in the SRX on one 
flow.

Just remember - schedulers only enable and disable policies, so make sure you 
permit the traffic in a fall-through policy.  Ideally you'd put the 
"business-hours" policy at the top and attach it to the IDP rule/scheduler, 
then have a policy below it for the out-of-hours.

Cheers,

Ben

On 10/01/2012, at 12:28 PM, Dale Shaw wrote:

> Hi all,
> 
> Does anyone know of a way to enforce traffic policing or shaping based on
> time of day?
> 
> Platforms available to us: EX-series (EX4200 predominantly), J-series
> (J2320/J6350) and SRX-series (SRX240, SRX650, SRX3K, SRX5K).
> 
> I'm looking for a way -- preferably a built-in way (avoiding scripts if
> possible) -- to limit a particular application's throughput during business
> hours.
> 
> The application is NetApp SnapMirror. I suspect a far better option would
> be to control transmission rates at the source but I'd like to investigate
> JUNOS-based controls as well.
> 
> cheers,
> Dale
> _______________________________________________
> juniper-nsp mailing list juniper-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 


_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to